CVE-2016-9372
MEDIUMWireshark 2.2.0-2.2.1 - Denial of Service via Profinet I/O Dissector
Title source: llmDescription
In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1037313
Vendor Advisory x_refsource_confirm
https://www.wireshark.org/security/wnpa-sec-2016-58.html
Patch x_refsource_confirm
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4127e3930ef663114567002001f44e01eba8a250
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94368
Issue Tracking x_refsource_confirm
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12851
Scores
CVSS v3
5.9
EPSS
0.0038
EPSS Percentile
59.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
CWE-399
Status
published
Products (2)
wireshark/wireshark
2.2.0
wireshark/wireshark
2.2.1
Published
Nov 17, 2016
Tracked Since
Feb 18, 2026